CVE-2015-8103 in CloudBees Jenkins
Sumário (Inglês)
The Jenkins CLI subsystem in CloudBees Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary code via a crafted serialized Java object, related to a problematic webapps/ROOT/WEB-INF/lib/commons-collections-*.jar file and the "Groovy variant in 'ysoserial'".
Reservar
09/11/2015
Divulgação
25/11/2015
Inscrições
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidade | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 79330 | CloudBees Jenkins CLI commons-collections-*.jar Serialized Elevação de Privilégios | 77 | Alto | Correção oficial | CVE-2015-8103 |